payload

SUSPICIOUS: the content itself is a benign Payload CMS reference skill, but the recommended installation path asks the agent to install another skill from an unrelated third-party GitHub repo through the skills CLI. The primary risk is transitive trust/supply-chain exposure, not malware or credential theft in the provided skill content.